Your data, and what we send to AI.
Rail Repay is a self-service tool that helps you spot and prepare UK rail Delay Repay claims. We collect the minimum data needed to do that, and we are careful about what we send to our AI provider.
Last updated: 18 June 2026. This policy may be updated as the product evolves — check this page for the latest version.
AI claim drafting — what we do and do not send
When Rail Repay AI Assist drafts your claim text, we do not send your name or contact email to our AI provider. We send only the journey facts needed to write the claim:
- Date of travel
- Route (e.g. Colchester to London Liverpool Street)
- Scheduled and actual/arrival times
- Delay length (minutes)
- Confirmed compensation band and amount
- Your optional impact note, if you added one
Your name and contact email are added to the finished draft by us, after the AI has written the body — they are never part of the AI request. Under OpenAI's API data-usage policy, data sent through the API is not used to train their models. We also do not store the full AI prompt; we keep only generation metadata (such as timing and token counts). You always review and submit the claim yourself — we never submit on your behalf.
What we collect and why
To send delay alerts and account sign-in (magic link) emails, and to match you to your saved route.
To monitor the right Greater Anglia corridor and direction(s) for you.
Added to your finished claim draft so it is ready to submit. You choose whether to provide these in your account settings.
Ticket type and price are used to estimate your Delay Repay amount. Estimates are indicative only.
To tell you when a journey may qualify and to prepare a claim draft.
Free text you can add to a claim. Treated as fact and included in the draft if you provide it.
To operate, secure, and improve the service (e.g. that a draft was generated). We do not sell your data.
Who processes your data
We use the following sub-processors to run Rail Repay. They process data on our behalf under their own security and privacy terms. Some are based outside the UK/EU, so some data may be transferred internationally with appropriate safeguards.
Database, authentication, and storage of your account, route, and claim data.
Sending transactional and alert emails (and magic-link sign-in emails).
Drafting claim text from journey facts only (see “AI claim drafting” below).
Application hosting and delivery.
Your choices and rights
Under UK GDPR you have the following rights. To exercise any of them, email us at hello@railrepay.co.uk.
- Access a copy of the personal data we hold about you.
- Ask us to correct inaccurate data (e.g. your claim name or email).
- Ask us to delete your data (right to erasure).
- Withdraw consent or unsubscribe from alerts at any time (every email has an unsubscribe link).
- Object to or restrict certain processing.
Contact
Questions about this policy or your data? Email hello@railrepay.co.uk. Rail Repay is an independent tool and is not Greater Anglia.
This Privacy Policy is informational and is not legal advice. It describes how Rail Repay handles data in accordance with this policy, which may be updated as the product evolves.